1. Introduction

LoomLab (“we”, “our”, “us” or “LoomLab”) operates the LoomLab platform at loomlab.ai. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal data when you use our services (“Platform”). By using the Platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

• Email address (required for authentication)
• Name (optional)
• Account creation date and last login timestamp

2.2 Project Data

• Electrical system models, components, and configurations
• Project metadata (names, descriptions, timestamps)
• Validation results and analysis outputs
• Manufactured documentation outputs (e.g., PDFs)

2.3 Usage Data

• Feature interactions and usage patterns
• Technical logs (errors, performance metrics)
• Browser type, device information, IP address (with storage minimization)

3. How We Use Your Information

We process your information to:

• Provide and maintain the Platform
• Authenticate and secure your account
• Deliver Platform functionality and store your data
• Improve features, reliability, and performance
• Send updates, administrative messages, and support responses
• Provide customer support when requested

4. Lawful Basis for Processing

Where applicable, we rely on:

• Performance of a contract — providing the Platform
• Legitimate interests — improving features, security monitoring
• Consent — for optional analytics or tracking

You may withdraw consent at any time where consent is the basis of processing.

5. Data Storage & Security

We store and protect your data using industry-standard technical safeguards:

• Database: Supabase (PostgreSQL with row-level security)
• Hosting: Vercel (enterprise-grade hosting)
• Authentication: Supabase Auth (secure session management)
• Encryption: TLS for data in transit; encrypted at rest

We review and update security practices regularly.

6. Data Sharing and Disclosure

We do not sell your personal data.

We may share information with:

• Service providers who support the Platform (e.g., Supabase, Vercel)
• Legal authorities when required by law or to protect our rights
• Third parties with your explicit consent

Your project data remains private. We only access project data with your explicit authorization for support or maintenance.

7. Your Rights

You have the right to:

• Access your personal data
• Export your project data (e.g., YAML, PDF formats)
• Correct inaccurate information
• Delete your account and data
• Object to non-essential processing

To exercise these rights, contact privacy@loomlab.ai.

8. Cookies & Tracking

We use minimal cookies:

• Authentication: Required for secure sessions
• Preferences: Optional UI settings
• Analytics: Anonymous usage statistics only

We do not use tracking for advertising or personal profiling.

9. Beta Program Notice

LoomLab is in production testing. While we adhere to privacy and security standards, the Platform is evolving. Users may encounter changes to features or data structures. Significant changes to this policy will be communicated via email or platform notification.

10. Data Retention

• Active Accounts: Retained as long as the account is active
• Deleted Accounts: Removed from the system within 30 days
• Backups: Retained up to 90 days for disaster recovery, then permanently deleted

11. Governing Law

This Privacy Policy and any disputes arising under it are governed by the laws of England and Wales, without regard to conflict of law principles.

12. Contact Information

For privacy inquiries or data requests:

• Email: privacy@loomlab.ai
• Support: support@loomlab.ai
• Website: loomlab.ai/contact